How to query the incoming serial of a zone while inline signing

2014-01-30 Thread Klaus Darilion
Hi! I use Bind for inline signing between a hidden master and the public slaves. AFAIS Bind maintains 2 serials: one for the incoming unsigned zone (eg. used to match incoming NOTIFYs) and one for the outgoing signed zone. I want to monitor if my name servers are all up2date by monitoring

Re: How to query the incoming serial of a zone while inline signing

2014-01-30 Thread Mark Andrews
In message 52ea4c56.5060...@pernau.at, Klaus Darilion writes: Hi! I use Bind for inline signing between a hidden master and the public slaves. AFAIS Bind maintains 2 serials: one for the incoming unsigned zone (eg. used to match incoming NOTIFYs) and one for the outgoing signed zone.

Re: How to query the incoming serial of a zone while inline signing

2014-01-30 Thread Klaus Darilion
On 30.01.2014 14:19, Mark Andrews wrote: In message 52ea4c56.5060...@pernau.at, Klaus Darilion writes: Hi! I use Bind for inline signing between a hidden master and the public slaves. AFAIS Bind maintains 2 serials: one for the incoming unsigned zone (eg. used to match incoming NOTIFYs) and

Re: How to query the incoming serial of a zone while inline signing

2014-01-30 Thread Tony Finch
Mark Andrews ma...@isc.org wrote: In message 52ea4c56.5060...@pernau.at, Klaus Darilion writes: Are there any tools/ways to query Bind for the incoming serial? rndc zonestatus zone [class [view]] I think that's a BIND-9.10 feature :-) On 9.9 I think you either have to look at

Re: How to query the incoming serial of a zone while inline signing

2014-01-30 Thread Klaus Darilion
On 30.01.2014 14:28, Tony Finch wrote: Mark Andrews ma...@isc.org wrote: In message 52ea4c56.5060...@pernau.at, Klaus Darilion writes: Are there any tools/ways to query Bind for the incoming serial? rndc zonestatus zone [class [view]] I think that's a BIND-9.10 feature :-) On

Re: How to query the incoming serial of a zone while inline signing

2014-01-30 Thread Tony Finch
Klaus Darilion klaus.mailingli...@pernau.at wrote: named-compilezone -j -f raw -o - example.com \ /etc/bind/zones/example.com 21| grep SOA|awk '{print $7;}' Another option might be to use named-journalprint and grab the last SOA from the output. I don't know which is faster... actually,